Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: H34pRv7i+wiGN8ipJrs+Zjd51l1IczBqwqOBr5M0x78=
Subject key identifier: 31:1B:8F:73:54:55:9E:07:7B:0C:1B:30:CA:2C:1B:CA:9D:50:37:BA
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0199FC8FCA42E6187077EFCF2961EA6DF82E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0C3D
Signing time: Sun 19 Oct 2025 13:01:45 +0000
Manifest this update: Sun 19 Oct 2025 13:01:45 +0000
Manifest next update: Mon 20 Oct 2025 13:01:45 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: 6IxTQQxnjJG1q+K662I7A0abxyMk8wbLZPyX88GEBhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ca:42:e6:18:70:77:ef:cf:29:61:ea:6d:f8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Oct 19 13:01:45 2025 GMT
Not After : Oct 20 13:01:45 2025 GMT
Subject: CN=311b8f7354559e077b0c1b30ca2c1bca9d5037ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e3:f5:f3:89:f6:0c:58:cc:60:06:8f:12:f6:
7c:2f:71:d5:01:c5:c3:9e:c1:ab:11:1b:e8:7e:de:
9d:b6:cb:68:b1:6d:ef:70:ea:46:6d:ce:0b:09:ca:
d2:cb:73:da:7c:d5:0c:37:97:da:ec:90:ee:76:56:
7b:3d:38:7d:d0:7b:72:2b:11:85:d6:57:2a:ae:5f:
a5:32:e8:37:98:6c:b2:9d:f1:54:35:e5:b1:c9:23:
0a:61:50:b9:83:36:a4:86:71:a9:e6:d6:c4:87:b7:
27:3c:95:28:60:df:69:d2:0c:41:e5:06:58:14:80:
71:99:bd:b8:84:74:d3:50:90:8d:17:22:b2:fb:5e:
f5:52:e9:9e:c0:1f:95:df:24:25:e2:a7:92:72:e7:
2a:50:ee:ee:bb:98:19:76:2d:c7:c4:03:fb:07:1e:
a5:14:69:48:e8:d4:71:3a:2d:5f:5a:41:d5:88:a3:
a5:26:08:c2:f7:db:91:77:e7:38:9e:5a:ff:5a:3f:
8d:5f:66:07:09:1f:44:25:af:d1:7e:87:6b:0b:78:
a9:b8:e1:8a:26:6a:3a:96:a4:5a:b9:c0:e8:e1:b3:
61:38:3c:e5:f3:8d:f3:e1:83:bc:d9:8e:8a:0b:0d:
bf:3e:f4:c2:59:bd:dc:ff:ab:b7:9d:24:d0:4f:0b:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1B:8F:73:54:55:9E:07:7B:0C:1B:30:CA:2C:1B:CA:9D:50:37:BA
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e4:87:89:63:f5:ee:00:d9:e2:da:68:cc:07:a5:17:a3:28:
84:84:59:57:be:66:73:32:47:44:dc:7a:d3:50:96:b2:7a:72:
c8:3b:73:e0:00:7b:a1:45:35:69:bf:bf:f1:9a:90:40:3a:eb:
92:a4:ea:f1:0f:57:f8:53:b6:59:ed:00:90:38:d7:bc:cf:cb:
45:a7:d4:5f:a3:bd:d7:fa:fa:dd:55:a8:6b:5c:87:38:7c:4b:
8e:24:88:8b:16:6e:d5:23:18:e2:35:ca:64:5f:85:59:1e:21:
fa:9b:55:cd:cc:12:86:13:2d:3d:7b:c8:2a:5b:74:54:bf:30:
13:bd:de:c6:a0:b1:20:a3:c6:7b:19:b9:9d:f0:3f:e4:66:1e:
cd:6f:84:0e:50:c2:3b:06:b8:75:ee:59:af:32:40:15:a1:2f:
6b:a0:c8:9d:62:85:cf:0c:47:2b:f2:1f:68:55:a5:81:ec:57:
60:d9:2a:72:c7:ea:5c:6e:ce:87:5f:ad:4a:86:f9:d8:38:e8:
6a:46:ed:1c:13:92:ef:de:d7:ab:5d:64:e6:b1:03:6d:63:c6:
c0:78:81:fd:b1:9b:86:4c:ed:e3:5b:a1:cb:ee:c3:f5:a4:5e:
d5:42:78:b1:b5:2e:95:be:9b:9a:0a:ea:b9:7e:41:4a:46:c3:
aa:89:64:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:25 2025 by rpki-client